这包括识别、认证、授权、访问控制、数据屏蔽、审计和加密。
This includes identification and authentication, authorization, access control, data masking, auditing, and encryption.
游戏服务器可以检查授权并控制对媒体的访问。
The game server can check authorization and control access to the media.
它们有很多相同的概念，要处理的问题域也在很大程度上重叠：验证、授权和访问控制。
They both share a lot of concepts and a domain — the domain of authentication, authorization, and access control.
如果只有中间层服务的标识传播到下游服务，则下游服务不能对服务访问审核和授权进行正确的控制。
If only the identity of the middle tier service is propagated to the downstream service, the downstream service does not have proper control over audit and authorization of access to the service.
典型的访问控制和授权场景包括三个主要实体：主体、资源和动作以及它们的属性。
A typical access control and authorization scenario includes three main entities — a subject, a resource, and an action — and their attributes.
目前多数系统都以专有的方式实现访问控制和授权。
Most of the current systems implement access control and authorization in a proprietary manner.
XACML的初衷是开发一项访问控制和授权系统的标准。
XACML is an initiative to develop a standard for access control and authorization systems.
系统应该提供相应的机制，以便使用自行管理环境中的用户数据对用户进行身份验证，并使用按需环境中的访问控制数据进行授权。
The system should provide mechanisms to authenticate users with user data residing in the on-premise environment, and authorize with access control data residing in an on-demand environment.
其次，使用授权机制来控制对应用程序功能的访问。
Second, an authorization mechanism is used to control access to application functionality.
此类授权测试可以称为细粒度访问控制，因为运行应用程序将其应用于该程序所使用的几乎任何类型的资源。
This type of authorization testing might be called fine-grained access control because it is applied by a running program to virtually any type of resource that the program works with.
当用户每天都试着访问仅授权给管理员的控制权时，会发生什么？
What happens when the everyday user tries to access a control that is authorized only for administrators?
拦截器使用应用程序的访问控制策略来做出授权决定。
Interceptors use your application's access control policy to make authorization decisions.
XACML构建于SAML之上，提供了用于定义访问控制和授权请求及响应消息的实际语义。
XACML builds on SAML by providing the actual semantics used to define access control policy and authorization request and response messages.
（在本例中，我只能通过编程方式访问它，因为与所有内容关联的默认访问控制被设置为拒绝任何未授权访问）。
And in this case, I can only access it programmatically, because the default access controls associated with everything are set to deny any noncredentialed access to it.
访问标志的概念非常类似于基于标签的授权控制。
The concept of an access token is very similar to label-based authorization controls.
您可以设计访问控制策略，以便根据用户在特定组织中的角色对其进行授权。
You can design access control policies to grant authority to a user based on their role in a particular organization.
授权的目的是对每个ID、每个角色、或者每个概要进行访问控制。
The purpose of authorization is to control access to resources on a per-ID, per-role, or per-profile basis.
本文借助示例演示了权限集合和访问控制列表，并授权给 CM实体，如用户、用户组、项目类型、项目、工作流等。
With the help of examples, this article highlights privilege sets and Access Control Lists (ACLs) to be granted to CM entities like users, usergroups, itemtype, item, workflow, and so on.
对文件访问进行访问授权的一种方法是实现访问控制列表 (ACL)。
One method to satisfy the access authority on file access is to implement an access control list (ACL).
授权和访问控制的粒度粗细不等。
Authorization and access control can vary from coarse - to fine-grained.
通常pac包含制定访问控制决策所需的授权信息。
Usually PAC carries the authorization information that is used to make access-control decision.
Realm写操作：目前所有Realm实现都支持“读”操作来获取验证和授权数据以执行登录和访问控制。
Realm Write operations: Currently all Realm implementations support 'read' operations for acquiring authentication and authorization data to perform logins and access control.
本文描述HumanTaskManager人员解析的编程模型，前者为基于实例的授权提供访问控制列表。
This article describes the programming model for Human Task Manager staff resolution, which provides access control lists for instance-based authorization.
objectDefinitionSource组件包含对应于将要发生的授权的访问控制定义。
The objectDefinitionSource component contains access control definitions according to which authorization will take place.
对于此示例，请使用AccessManager访问控制列表(Access Control List,ACL)来管理ObjectGrid授权策略。
For this example, use the access Manager access control list (ACL) to manage the ObjectGrid authorization policies.
诸如apache等Web服务器提供的授权类型可以称为粗粒度访问控制，因为它只提供了一个外部安全层。
The kind of authorization provided by a Web server like Apache might be called coarse-grained access control because it provides only an outer layer of security.
ObjectAuthorityManager (oam)中定义的授权策略可以基于用户ID和组成员身份进行访问控制。
The authorization policies defined to the Object Authority Manager (OAM) control access based on user IDs and group membership.
在CMV 8中，授权是通过访问控制列表(Access Control List,ACL)来处理的。
Authorization is handled in CM V8 with Access Control Lists (ACLs).
使用Acegi安全性可以为应用程序提供全面的身份验证、授权、基于实例的访问控制、通道安全和人工用户检测功能。
Using Acegi security provides your applications with comprehensive authentication, authorization, instance-based access control, channel security and human user detection capabilities.
这种授权还包括控制对mashup应用程序的特性的访问(例如导航控件、通信控件)。
This authorization also includes controlling access to the mashup application's features (for example, navigation controls, communication controls).
应用推荐